Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Zak Kaufman :1password: (zak@infosec.exchange)'s status on Friday, 20-Jan-2023 19:38:25 JST Zak Kaufman :1password:

   Here's some more #security stuff about #1Password. This time, it's all about Watchtower.

   #Watchtower has been around for some time, but new to 1Password 8 is a metered Watchtower score. This score will improve as you adjust to the good habits of using a password manager (or more generally a secrets manager). There might be more to that than you first realize.

   Your passwords need to be unique, random, and strong. You'll need to have enabled MFA with logins that permit you to do so. 1Password will also track expiring items (like credit cards and driver's licenses) and ask you to renew them when the time comes. And it'll track any websites that you've saved as less-than-secure HTTP links instead of HTTPS links, but those are becoming less common over time.

   As a bonus, it will alert you when your credentials have been involved in a security incident of some sort. Watchtower integrates with @troyhunt's Pwned Passwords, and additionally has its own system for detecting compromised credentials. I am one of the people that helps to maintain that system.

   Watchtower will increase your score until you max out at 1200. So, I'd ask who thinks they can beat my score... but you can't. But do your best to match it.